clj-http

erwinrooijakkers 2019-12-20T10:12:53.005900Z

Thanks we’ll take a look! 🙂

erwinrooijakkers 2019-12-20T10:20:59.006500Z

> A Java keystore stores private key entries, certificates with public keys or just secret keys that we may use for various cryptographic purposes. It stores each by an alias for ease of lookup. > Generally speaking, keystores hold keys that our application owns that we can use to prove the integrity of a message and the authenticity of the sender, say by signing payloads.

erwinrooijakkers 2019-12-20T10:21:30.007200Z

I think that is what we are doing. We are calling an external API and have to identify ourselves by signing our request with our private key

erwinrooijakkers 2019-12-20T10:21:59.007700Z

> A truststore is the opposite – while a keystore typically holds onto certificates that identify us, a truststore holds onto certificates that identify others.

erwinrooijakkers 2019-12-20T10:22:06.008Z

But we do have to know the other party yes

erwinrooijakkers 2019-12-20T14:31:05.008300Z

OK problem is solved, indeed by adding the public key part to the trust-stoire